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(57) Abstract 

A license management system and method for recording (6) the use of licensed product (IX and for controlling (4) its use 
A licensed product invokes a license check monitor (2) at regular time intervals. The monitor generates request datagrams (3) 
which identifly the licensee and the product and sends the request datagrams over a communicati ns facilify to a license control 
system (4). The license control system maintains a record (6) f the received datagrams, and compares the received datagrams to 
data stored in its licensee daUbase (5). C nsequently, the license control system (4) transmits reply daUgrams with either a denial 
r an approval message. The monitor (2) generates its own denial message if its request datagrams are unanswered after a prede- 
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LICEHSE MANAGEMENT SYSTEM AND METHOD 



« f if-iA of t tlft Tnvftnticsn 

The present invention generally relates to 
5 systems for managing licenses of products such as 
computer software, video games, CD-ROM information, 
movies and other video products, music and other audio 
products, multimedia products, and other systems for 
up-to-date recording of actual usage of such a 
licensed product to enable efficient billing therefor. 



10 



Dftfigrlpt lon »^ Related Art 

Licenses for information products such as 
computer software, music, video products and the like 
usually provide licensees with limited rights. The 
15 licenses may restrict sites of use, duration of use, 
or number of concurrent uses of the products. Th 
licenses also may limit the use of the products 
depending on currentness of licensee's payments. 
However, enforcing the conditions of the licenses is 
difficult, because, in general, the licensed products 
may be easily copied or "pirated" and used without the 
licensor's knowledge. 

compliance with limited license rights has been 
encouraged with copy protection. Known methods of 
25 computer software copy protection include putting a 
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physical hol. or .ark n th. dl.kett containing a 
product, r placing data on the disk tt in a locat on 
iher. no data i. expected. A disk with an i"*^*^^^ 
copied software product usually would not contain the 
»arks. At the beginning of its operation, a copy- 
protected, but illegally copied software product would 
search it. own disk.tt. for th. >uu:k.. Upon failing 
to detect the «ark., the software would abort fro« it. 

normal procedures. 4. w«„^ 

Most software products sold today do not have 
such copy protection, partly because copy protection 
renders legitimate duplication of copy protected 
software difficult, but not impossible. Copy 
protection frustrates the making of legitimate copies, 
ytiLlB not eliminating unauthorized copying. Many 
software publishers have experienced higher sales by 
eliminating copy protection schemes. 

Another method for enforcing limited licensing 
rights of computer software is described in U.S. 
patent Ho. 4,932,054 to Chou. Chou describes a -coded 
filter- hardware device which is plugged into a port 
of a computer. The -coded filter- output, an 
authorization control code when a predetermined 
control code i. sent to it. The licensed software 
functions properly only if the -coded filter 
transmits the correct authorization control code to 

the software. 

»hil. devic. .ueh d..crlb«d by Chou h.v 
«ci.t«I for ..v.r.l y«r., th.y b.v. not b.» w.U 
.co.pt.d by th. «rx.t. Sine. th. d.vlc. i- J*^* * 
to th. oufid. of . eoiwufr, it cm ...ily b. lo.t or 
.tol n. pr venting th us of J" 
addition, if . license purchas d a number of softvar 
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products, ach of which us d Chou's prot ction sch a , 
th licans a w uld collect a stack of "coded flit rs." 

Harshey, In U.S. patent Ho. 4,924,378, describes 
a nethod for lUlting the number of concurrent uses of 

^5 a licensed software product. Each workstation of a 
network has a license storage area in its local 
nenory. License Manageaent system (MS) daemons are 
provided in the network in a nuaber corresponding to 
the peraissible nuaber of concurrent uses of th 

10 software product. To use the software, a work station 
stores a daemon in its license storage area. If all 
daeaons are in use, no further work stations aay use 

the software. 

Robert et al., in U.S. patent Ho. 4,937,863, 
15 describe a similar invention. This invention includ s 
a license manageaent facility which accesses a 
database of license inf oraation related to licens d 
coaputer software prograas. When a user atteapts to 
use a licensed p rograa, the license aanagea nt 



20 facility first checks the database. Access to th 
licensed product is prevented if licensing conditions 
related to the product are not satisfied (e.g., 
expiration of licensing dates, etc). 

While the Robert et al. and Hershey patents show 
25 effective techniques for controlling licensed computer 
software, each also reveals coaponents that cannot be 
easily aanaged by an average user. A systea manag r, 
or someone with special access privileges to th 
internals of a machine, must install the licens d 
30 software. This hinders the distribution of th 
software. 

Lie nsabl products oth r than computer software 
have not g n rally be n c py-prot ct d. F r xampl , 
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Video tapes can b« asily copi d by anyone vith tw 
VCR nachln s, and audi tapes and Busic CDs can b 
easily copied to tape. Computer CD-ROMs can be copied 
to magnetic disk; however, their large information 
storage capacity relative to that of magnetic disks 
makes this a very expensive proposition. Th 
introduction of digital audio tape is being delayed, 
because some view its ability to easily produce very 
high quality copies as a threat to music royalties. 

Hellman, in U.S. patent Ho. 4,658,093, describes 
means to bill by usage. This is accomplished via 
communication of an encrypted authorization code from 
a licensor to a base unit at the licensee's site. The 
encrypted authorization code contains information 
related to an identification of the base unit, a 
number of uses requested, and a random or non- 
repeating number; however, implementation of Hellman's 
scheme requires a -base unit", such as a computer, 
video game unit, record player, video recorder, or 
20 video disk player, with a unique identification 
number. The requirement is difficult to satisfy, 
because, at the present, only a fraction of such 
systems on the market have an internally readabl 
serial number for identification. In addition, 
25 vendors of these systems provide no guarantees for the 
uniqueness of any given device's serial number. 
Furthermore, an internal serial number can change when 
hardware maintenance is performed on the device. 
Also, Hellman's approach requires that an identical 
30 copy of each software product be stored at th 
authorization site. These copies are used in th 
gen ration f uniqu keys. The unstat d assumption 
that all copies f a sp cif ic v rsi n of a s ftwar 
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product ar id ntical is unr allatlc. Minor bug f ixea 
t s ftwar ar oft n »ad without gen rating a n v 
varaion of tha product. Also, aoaa a ftwar products, 
such as thosa which run on Macintosh coaputars, ara 
5 salf-aodifying. 

Whila Hallnan's invention counts each use of tha 
software, it does not monitor the duration of us . 
Thus, Hell»an»s system would not be able to bill for 
extensive use of licensed software if the softwar 

10 were continuously operated. Finally, while Hellman 
suggests the inclusion of an automated communication 
system as part of his invention, he does not disclose 
how this communication system could be implemented. 
Instead , he mentions-nonrautomated_-use_of telephone 

15 and mall. In summary, Mailman's patent is an 
interesting discussion of cryptographic techniques, 
but it does not provide a practical, real-world 

implementation-of those-techniques. _ 

Shear, in U.S. Patent No. 4,977,594, describes a 

20 system and method to meter- usage— of— distributed 
databases such as CO-ROM systems. Tha method 
describes a hardware module which must be part of th 
computer used to access the distributed databas . 
This module retains records of the information viewed. 

25 Once the module storage is filled, the module must be 
removed and delivered to someone who will charge for 
the usage recorded therein and set the module bade to 
zero usage. Like Bellman's method, this method 
requires a hardware module which must be incorporated 

30 within the computer so the system can control user 
access. No database publisher will be able to us 
this method until there are a very large number of 
units containing such modules. Hardware manufacturers 
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Will be h sitant to include th aodul in the d sign 
f th ir comput rs until th r is sufficient dcand 
fro. cu.to»er. or publisher, for thi. syte.. The 
.ethod and apparatus according to the present 
5 invention can be implemented entirely in .of tvare and 
hence doe. not require special, dedicated computer 
subsystems. 

It is an object of the present invention t 
10 provide a license management system and method which 
can ensure that a licensed product is used only on 
machines under which it is licensed. 

It is another object of the present invention t 
pro^ride Y^i^e management system and method which 
15 may terminate access to a licensed product once it. 
license has expired. 

It is yet another object of the present invention 
to provide a license management system and method 
which may terminate access to a licensed product when 
20 payment for a license is overdue. 

It is a further object of the present invention to 
provide a license management system and method which 
can limit the number of concurrent uses of a licensed 

product. . *.i 

25 It is yst another object of the present invention 

to provide a license management system and method 

which can bill licensees for the duration of actual 

usage of a licensed product. 

The present invention provide, an advantageous 
30 feature of quickly and effectively implementing 

licens agr ements betw n a lie nsor and licensee. 
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The present Inv ntion provld s anoth r 
advantage us f atxire f allowing logic us d to c ntr 1 
licenses to be easily changed. 

The present invention provides yet another 
5 advantageous featiire of detecting, at the licensor's 
site, aany types of attempts to alter the licens 
managefflent systea. 

The present invention provides a furth r 
advantageous feature of permitting anyone without 
10 special access privileges to install a licens d 
product. 

In the present invention, a licensed product 
generates request "datagrams," messages transmitt d 
over a communications network. — The request -datagrams. 
15 are sent to the licensor's site. At the licensor's 
site the datagram is compared to information stored in 
a license database. After the comparison, a reply 
datagram is -sent-^o-the-l-icensee^-Dpon-receiving th 
reply datagram, the licensed product reacts in 
■ 20 accordance with the instructions therswithin. Por 
example if a reply datagram contained a "denial," th 
licensed product would display an appropriate messag 
to the user and then suspend further execution of its 
programs. 

2S In the present invention, the licensed product 

is implemented on a network node attached to a 
communications network that includes the licensor. 
The network node may be a computer, a CD-ROM player, 
a tele-computer or other multimedia machine, or any 

30 other appropriate device. The node nay also be an 
intelligent type of consumer electronic device us d 
for presenting information, such as an intelligent 
t 1 vision, VCR, vid odisk play r, music CD play r. 
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audi tap playar, t 1 phon or other siailar d vie . 
purth r, th connunications network aay be any tw - 
way network such as a computer network, telephone 
network, « cellular telephone network or other 
5 wirelese network, a two-way cable TV network, or any 
other equivalent systea. 

Should the user detach the node £ro» the network, 
the licensed product will fall to receive reply 
datagraM. Upon several failures to receive reply 
10 datagrams, the licensed product will generate its own 
denial. 

After a request datagram has been sent out, a 
user may be permitted to use the licensed product for 
a limited duration. This feature may be necessary 
15 because of the delays In network communications. When 
networks are sufficiently fast, use of a licensed 
product can be postponed until the reply datagram Is 
received. 

In the preferred embodiment of the present 
20 Invention, licensees' network addresses are used to 
Identify the licensees. Other embodiments may use a 
licensed product serial number or hardware serial 
numbers for the identification. 

A licensed product as in the present Invention 
25 generates a request datagram after each period of 
product use. The number of request datagrams received 
by the licensor can be used to bill the licensee. For 
example, if datagrams are sent after every hour of 
product use, the licensee will be billed for th 
30 amount equal to the number of request datagrams 
received by the licensor multiplied by the hourly 
rat . 
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Th «Bbodinents of the pr s nt invention laay 
incorporat a query system at a licens r*u sit £ r 
reporting on probl«a datagraas. This would allow ths 
licensors to take appropriate actions in accordanc 
5 — with probleas associated with each datagraa. 

KJITW DESCRIPTION OF THB DRAWINqS 

Thess and oth«r objects and advantages of this 
invention will becoas acre apparent and aors readily 
appreciated froa the following detailed description 
10 of the presently preferred exeoplary enbodiaent of th 
invention, taken in conjunction with the acconpanying 
drawings, of which; 

— FIGimE==3F^is— a— general block- diagraa- of the 

preferred exeaplary enbodiaent of the pres nt 
15 invention; 

FIGURE 2 shows representative diagraas of th 
--^^ — r^contents^and^foraats— of— data at licensee's sit , 
contained in datagraas, and at licensor's site; 

FIGURE 3 lllus^ates a sequence or representative 
20 operations executed at the licensee's site and at th 
licensor's site, together with required inputs for th 
execution of the operations and with outputs produc d 
therefroa; 

FIGURE 4 illustrates a sequence of representativ 
25 operations to send a request datagram, together with 
required inputs for the execution of the operations 
and with outputs produced therefroa; 

FIGURE 5 illustrates a sequence of representativ 
operations when a reply datagraa is overdue, together 
30 with reqniired inputs for the execution of th 
operations and With outputs produced therefroa; 
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FIGURE 6 Shows a s qu nc of r pr s ntativa 
operations to proc ss a reply datagram, t g th r with 
required inputs for the execution of the operations 
and with outputs produced therefrom; 
' FIGURE 7 — shows a sequence of representative 
operations to generate an authorization code, together 
with required inputs for the execution of the 
operations and with outputs produced therefrom; and 

FIGURE 8 shows a sequence of representative 
operations to send a reply datagram, together with 
required inputs for the execution of the operations 
and with outputs produced therefrom. 

-pTrrj^TTign-ngfiPPTPTTQW OF THE 



pp fffBWTT.Y PR fif^TPPm acixPTARY KMBOPPffiMT " 
15 AS shown in FIGURE 1, a licensed product 1 is 

located at a licensee's site. Product 1 may include 
a data portion-lB-and-a-f unctional-^portion lA such as 
computer software product or any other kind of 

^tnrbrartiwnprodiict— used -to— control^^^ 

20 portion IB. If data portion IB is CD-ROM database 
information, functional portion lA should enable the 
licensee to search indexes and display text. If data 
portion IB is video information, functional portion U 
should control the display of the video information. 
25 For audio information, functional portion lA should 
play the audio information. If data portion IB is an 
electronic book, functional portion lA should display 
and turn pages. The above examples show some of th 
ways functional portion lA can control data portion 
IB; however, they are hardly exhaustive. 

By including in product 1 both information and 
softwar which controls th inf rmation, product 1 is 
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an xecutabl product. Jion-softwar Infomati n in 
product 1 1« pr f rably ncrypted so that it cannot 
be easily extracted .froB the product. 

License checX aonitor 2 sends license datagrams 
5 3 To the" licensor" and 'also receives 1 icense datagrams 
3 from the licensor. License check monitor 2 als 
prevents further use o£ product 1 when a datagram 3 
containing a "denial" message is received. 

License datagrams 3 are messages that describe 
10 information related to the use of licensed product 1. 
Datagrams 3 are sent over a communications network 
between the licensee and licensor. Initially, th 
licensee sends a request datagram 3 over the network 
^o theTlcensor; fhi^lt^hsor then^ret^ 
15 datagram containing either an approval or denial. It 
is also possible to implement the present invention by 
having the licensor transmit a reply datagram only f r 
approvals. 

At the licensor's site, license control system 4 
20 makes licensing decisions by comparing requ st 
datagram 3 with license records 5. After th 
comparison, control system 4 stores information 
related to request datagram 3 into history of lie ns 
datagram record 6. It is noted that request datagrams 
25 3 are periodically sent while product 1 is in us . 
Thus, the history of license datagrams in record 6 
provides means for measuring the duration of use of 
product 1. 

Representations of data and records stored at th 
30 licensee's site, contained in datagrams, and stored at 
the licensor's site are illustrated in FIGURE 2. At 
the lie ns e»s site, n tw rk s rvico 7, which handles 
deliv ry and transmission of datagrams 3, supplies 
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„ twork .ddr .. ». It 1. by thl. addr .s that 11c ns. 
control .y.t.- 4 idontill . . location f ««. or 

•""^ Uc««d product rocord . 1. contalnod within 
■onitir 2? Tiithln thril»n.. product r.cord » 1. an 
W^Uflcatlon rocord 10. .hlch contain, th. foUowln, 
two lt«»: licnaor.. natvork .--r-' 
.od.l X» that ld«.tlfi.. product 1- J**" « 

llcanaor ha. only on. product, or u... dlff.r.nt 
llcansor network address.. 11 for each product, 
product »od.l number 12 «ay not b. n.«l«l. ^ 

Datagram sent record 13 .tore. Inf or»atlon about 
th. l..t .«.t datagram 3. « includ.. a datagram 
nu .^ 14. ^ich u^Iqu.iy:7-I<i.nt^i~ th.^ l..t 
L„»ltt.d datagr-. 3. and th. dat. and tl.. 15 wh«. 
th. la.t datagram 3 was .«.t tro. th. llcens.... .it.. 

lic.n.ed product record » al.o contain, control 
p.r.«t.r. record 16, which 1. us«I for oo""°»"»' 
L. timing of k.y .v.nt. in th. """^^^^^ 
llcn,, ch.ck monitor 2 with lien., control .y.t«. 
i send interval 17 .p.ci«i.. a tlm. int.rv.1 b.tw.«. 
..ch transmi..ion of a now data,r«. 3 from th 
license, to the licensor. » 

»ait interval 18 is th. length of time that 
«onitor 2 wait, to raciv. a raply datagram 3 b.for 
:::l::in; r.^..t datagr^. 3. Th. dur.tUn 

of thi. mtarval depend, on th. «P««d of th. 
communication, network being used to d.liv.r datagram. 

oi.oonn.ct .llow«l lnt«:v.l 19 i. th. duration 
of tlm. that monitor 2 .How. product ^ *^ ^ 
without a r ply datagram 3 from ^^'^^ 
durati n of thi. int rval d p nds on th r liability 
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of th« coBsunications n tvork. Th int rval oust b« 
long nough t tak« into c nsiderati n netvorlc 
doimtiaa. For exaBplc, supposa a nessaga was a nt 
froB tha licensor and the network vent down just 
5 afterwards. Disconnect allowed interval 19 should be 
long enough to allow the network to resxune its normal 
operation and successfully deliver datagrams 3 f r a 
the licensor; otherwise, the licensee would be forced 
to stop using product 1 until the network was 
10 operational. 

License datagram 3 contains header 20. Header 

20 is used during execution of low level comm\inication 
protocols within the network. Source network address 

21 is theZhetwork, address^ 3 is 
IS sent. Destination network address 22 is the network 

address to where datagram 3 is sent. Additional data 
may be included in header 20 if required by low level 
protocois^u8ed~ln~delivering datagrams 3. 

Data 23, a part of datagram 3, conve ys a message, 

20 and contains a number of fields. Product model number 
24 and datagram number 25 identify product 1 and 
datagram 3, respectively. It is noted that 
retransmitted datagrams have an Identical datagram 
number. Duplicate datagrams must be identified at a 

25 licensor's site so that they do not all contribut in 
billing a licensee. 

Each datagram ntimber 25 is unique for ach 
request datagram 3 transmitted from the 1 icons e, 
except for retransmitted datagrams. This allows a 

30 reply datagram 3 received by a licensee to be verif i d 
as an actual reply to a request datagram 3 from that 
lie ns e, as explain d below. 
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10 



15 



20 



25 



30 



NuBb r o£ proc ss • running 26 is the number of 
concurrent use. of product I at the ti»e datagram 3 
is sent. Authorization code 27 is used on reply 
datagrans 3 to indicate an approval or a denial. 
Message text 28 contains a message which will be 
displayed to the user upon a denial. 

License database 29 at the licensor's site holds 
records of information about customers, licenses, and 
license usage. The types of information within 
license database 29 of the present embodiment ar 
shown in PIGORE 2. However, a specific license 
management system may require its license <>»tabase to 
hold types of information other than those in FIGURE 
For-example^icensee_name_ and address may be 



incorporated as a part of a license database 29 

License record 5 contains information on 

licenses. Licensee network address 30 identifies a 
precise netvorlc node" which is licensed to use product 
1 _If_request_ datagrams are received which do not 
originate from Icnown licensee network addresses 30, 
reply datagrams containing denial messages ar 
transmitted. Product model number 31 is the mod 1 
number of a licensed product. Termination date 32 is 
the expiration date of a license. «hen the license f 
a product is issued for an unlimited duration, 
termination date 32 should reflect a date very far 
into the future, relative to the licensing date. 

The present embodiment allows licenses to be paid 
for in a lease-like or rental fashion. If a licens 
were to rent or lease product 1, paid through date 33 
would reflect the date through which the licensee has 
paid for using th product. Grac p riod 34 is the 
time int rval f r which th licens is all w d to be 
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dcllnqu nt bef r« s rvic« ar disc nn ct d. Grac 
pariod 34 y uld r flact a v ry larga tin ihtarval if 
tha licansa is not of a laasa-llka or rantal typa^ 
Whan tha licansa providas for a liait on tha nuabar of 
5 concurrant usas of a product 1/ number of procassas 
licenaad 35 contains tha limiting nunbar. Whan th 
licansa doas not provide for such a limit, nunbar of 
processes 35 should be a vary larga nuabar. 

History of license datagrams 6 is an archive of 
10 datagrams 3 received from tha licensee. 

FIGURE 3 illustrates operations executed at th 
licensee's site and at the licensor's site. An 
overview of the processing at the licensee's site is 

described _by_8tep8_1.01.0 to 106.0, and an overview of 

15 the processing at tha licensor's site is described by 

steps- 107-. 0-to -110 .0 . 

At the licensee's site, at step 101.0, product 1 
invokes monitor 2 . This is accoifprished by first 

est abli shing monitor 2 as a handler for a timer 

20 expiration interrupt signal and for received datagrams 
3. Next, a timer , is set with a vary short time to 
causa an initial call to monitor 2. At step 102.0, 
monitor 2 computes a time 36 since the last datagram 
was sent by determining the difference between the 
25 current data and sent time and date and time 15 that 
a datagram was last sent from the licensee *8 site. 
When product 1 commences execution, datagram sent dat 
and time 15 is set to "null." Thus, time since s nd 
36 is very large at the beginning of the monitor's 
30 execution. At step 103.0, time since send 36 is 
compared to sand interval 17. Zf time since send 36 
is gr at r than s nd interval 17, th n a r qu st 
datagram is transmitt d, per th st ps d scribed in 
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running 26. Zn th UNIX pirating syst a, this 
procedur could h% perfom d using th cosunand "ps" t 
obtain a list of current processes, the coanand "gr p" 
to extract the processes of product 1, and "vc" t 
5 count the nuBber of processes. Step 103.6 s ts 
authorization code 27 to nuaber 255 and encrypts th 
nuober. 

Nunber 255 indicates that datagran 3 is a request 
for authorization. Such an indication is needed to 

10 guard the present systea against the following steps 
for circuBventing the present invention: intercepting 
outgoing datagraas; and inputting the intercepted 
datagraas to aonitor 2 . 

Step 103.7 stores the current date and tiae as 

15 sent date fc tiae 15. This date is needed to coaput 
when to send the next datagraa 3. Step 103.8 assigns 
a value to send interval 17, which sets an alara f r 
invoicing aonitor 2 to send the next datagraa 3. Step 
103.9 sends datagraa 3. 

20 In the present eabodiaent a datagraa is 

transaitted via a connectionless datagraa servic . 
Methods for transaission are well docuaented for son 
networking systeas. For exaaple, TCP/IP (Transport 
Control Protocol/Internet Protocol) includes a con- 

25 nectionless protocol called UDP (User . Datagraa 
Protocol) . A aethod for sending a datagraa using UDP 
protocol froa a SUN Microsystea coaputer is docuaent d 
in a SUN aanual titled, Netvorlc Programming Guide, in 
section 9 titled "Transport Level Interface 

30 Prograaaing." 

Step 103.10 sets another alarm using wait 
int rval 18 for retransaitting datagraa 3, if n r ply 
datagram has be n r c iv d. The alara caus s aonitor 
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2 to b« Invok d for ch eking wh ther a reply datagram 

3 has be n rec ived. Monit r 2 will transmit a 
duplicate of the previously transmitted datagram, if 
no reply has been received. After the execution of 
step 103.10, -Send License Datagram" procedure returns 
system control to step 104.0 in PICURB 3. 

FIGURE 5 shows the operation of the "Reply 
Datagram is Overdue" procedure. Step 104.1 compares 
time since the last datagram was sent 36 to disconnect 
allowed interval 19, which, as described above, is th 
interval that product I is allowed to operate even if 
a reply is overdue. If time since send 36 is smaller 
than disconnect allowed interval 19, datagram 3 is 
retransmitted-via- execut-ing-step-103 . 9- in_FIGURE 4 . 
15 Step 104.2 "disconnects" product 1 from further 
service; — if -time— s tnce"send— 3 6— is -greater- than 
disconnect allowed interval 19. 

Step 104.2 comprises a sequence of sub-steps 

104.2.1-104.2.3 Step 104.2.1 assigns number 5 to 

20 authorization code 27 in the current datagram being 
processed. Value 5 is interpreted by monitor 2 as a 
denial. Step 104.2.2 sets message text 28 to th 
following: "A reply from licensor to numerous 
authorization requests was never received. This 
25 product must be connected to a communications network 
in order to function." Step 104.2.3 transfers system 
control to step 105.3 in FIGURE 6. Step 105.3 
processes the current denial datagram 3 as if it were 
just received. 

30 Through the execution of steps 104.1-104.3, th 

present system permits the use of product 1 for a 
prescribed period of tim . After the pr scribed 
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period of tin has laps d, th pr sent syst m 
generates, a. denial. 

PIGURB 6 illustrates the steps which aonitor 2 
follows in processing a reply datagraa 3. Step 105.1 
5 decrypts all encrypted data in the received datagraa. 
Step 105.2 compares datagraa nxrnber 25 with datagram 
nuaber 14 associated with the last datagraa. If 
datagraa nuaber 25 is not equal to datagraa nuaber 14, 
step 105.2 ignores the current datagram and transfers 

10 procedural control to step 103.9 (FIGURE 4) in order 
to resend the last transmitted datagraa. After 
disconnect allowed interval 19 elapses, monitor 2 

generates a denial. 

- — rin — ^esscnce^ — step 105.-2 guards against the 

15 circumvention of the present invention via: (1) 
intercepting a-reply da tagram-3 -( from the licensor) 
containing an approval (2) storing the re ply data gram 
3; and (3) inputting the stored datagram to monitor 2. 
___If_jthe-execution of step 105.2 does not transfer 

20 its procedural control to step 105.3, and if 
authorization control 27 is not zero (indicating an 
unqualified authorization has not been received) , step 
105.3 processes authorization code 27 via steps 
105.3.1 to 105. 3 »3. Step 105.3.1 retrieves messag 

25 text 28 from datagram 3. If message text 28 is null, 
then the current datagram 3 is ignored, and monitor 2 
resends the last transmitted datagraa 3. Step 105.3.1 
further protects the present system from attempts to 
generate f aJce datagrams and to feed the fake datagrams 

30 to monitor 2 by checking for a proper authorization 

code of zero. 

If m ssag text 28 is not null, st p 105.3.2 
pr 8 nts the m ssage 28 to th us r n an output 
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d vie such as a CRT screen. Step 105.3.3 teralnat a 
the curr nt use of product 1. This st p aay be 
implemented by subroutine or function call to a sinpl 
exit that saves any current user data to a file. 
Alternatively, product 1 may be designed so that, upon 
being directed to terminate further execution, it 
first gives the user an opportunity to save their 
data. 

If authorization code 27 is zero, step 105.4 
allows further use of product 1. Step 105.5 returns 
procedural control to 106.0 on FIGURE 3. 

FIGURE 7 shows a seqpience of operations within 
the "Generate Authorization Code" procedure. The 
— procediure produces_appropriate_jauthorizatlon code 27 
when a request datagram 3 is received at the 
—licensor's- site, — 

Step 108.1 decrypts all encrypted data in the 
received datagram 3. Using source network address 21 
an d product model number 24 in the datagram 3, step 
108.2 searches the license database 29 for matching 
licensee network address 30 and product model number 
31. If license database 29 does not contain a record 
of product model number 24 of the product I being 
licensed to the licensee, step 108.3 sets 
authorization code 27 of its reply datagram 3 to 1 
(i.e., the sending node is not a registered address) 
and authorization is denied. 

Step 108.3 prevents copies of product 1 from 
being installed on multiple nodes independently of 
whether they are within or outside the licensee's 
organization. Step 108.3 also prevents the licensee 
from transporting product 1 from one node to an ther 
nod with ut th lie nsor's appr val. This is 
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proe...in9 cpadti .nd th y -y b. bilUbl .t 

diff«r«nt rat««. j ^ i. 

If thm dat. a requa.t datagram is received is 
later than Ucen..- ter-inatlon daf _ 32, step 108.4 
•ets authorisation coda 27 to nu»ber 2 (i. "c™ 
ha. expired). Step 108.4 alloir. the licensor to fix 
liceiuiing period., or to determine free trial period, 
for the use of the product. The licensing period >ay 
be extended by resetting license termination date 32 

at the licensor's site. , ^ 

If the date when the datagram is received is 
later than the paid through date 33 as extended by th 
gracri^iod 34,- step 108.5 sets.authoriz_ationc_ode 27 

15 to 3 (i.e., payment is past due). 

If thl number of processes running 26 exceed, a 

licensed number of concurrent uses of product 1 (at a 
^^t-icul^node)T-then-«tep-l08.^^^ 

Hde 27 to 4 (i.e. concurrent p roce ss usag e limit is 

20 exceeded) . ^ *■ a 

Step 108.7 set. authorization code 27 t 0 
indicating proce..ing can continue. It i. noted that 
steps 108.3-108.7 are a part of a 
IF (xl) then (yl) 

25 ELSE if (X2) then (y2) 

ELSE if (x3) then (y3) ... 
.t.t««.t of . proc«»ur. (.. ,.. FOPTRAH, PA^OL. C 

.tc). Th».. only on. of '^'P- "•''-^'V 
^^UA. St.p ioa.7 ..t. .uthoriz.tion ood. 27 t 0 
,0 (indicting .pprov.l of f«rth« u..) only if .t P. 
108.3-108.6 do not ex.cut. th. TKEH portion of ach 
St p. St p loe.T also Btor s th. rec.lv«l datagran 3 
In hi»t ry f liens datagrans «. 
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Step 108.8 i. the last f auth ri ration 
procesBing rule. 108.1-108.7. After the ex cut! n of 
steps 108.3-108.7, step 108.8 returns procedural 
control to step 109.0 In FIGURE 3. 

FIGURB 8 illustrates the steps which license 
control system 4 follows to send reply datagram 3 t 

the licensee. 

Step 109.1 encrypts authorization code 27 and 
writes the encrypted code into datagram 3. Next, step 
109.2 writes message text 28 corresponding to 
authorization code 27 into datagram 3. 

Step 109.2 may be replaced with the following 
method for relaying proper messages to a product user. 
Proper messages corresponding to-each authorization 
code is stored in monitor 2 at each licensee's site. 
~l^"n«cTptionTf"TTe^"dit-agr-a^^^^^ 



upon reception of a repiy aatayi.— 

locate within itself the proper message corresponding 
to the authorization code, and use the message for 
~ ~ v ^ous purposes . T hls-method-would-reduce the siz 
20 of reply datagram. 3. However, if the licensor wanted 
to implement new denial codes, each product would need 
to somehow incorporate the new message associated with 
the new denial code into itself. The list of 
messages, one of which may be written as message text 
25 28, are as follows: 



X0TH^«TIOH ^ ^^^^^ 



30 



This product is not licensed t 
run at this location. Please 
contact the licensor to «iwer 
license this product, or »ove an 
existing license yowr 
organization t this 
us f this product at this 
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locatl n !• di.continued until 
iSlI probl a is r solv d. 

' expired, '^••h.v. vour iic n» 

^JilS" of this product U 

resolved. 

on thU^ U«»?«-J'S$2f 
i. ovjr du. ^v. y or 

accounting . 
1„ order to contlnu. yow^^ 1. 

Sr.contfnu.d^tU th'u probl- i- 
resolved. 

»our current «..ot «.l. lie nj^d 

£2fu«ns^" W. try .g.i" 

—-later* - 

""SSi.sr«^s^~rs 

r.clvjd. ^".P'eomanic.tions 
^^lA "d.r to function. 
Authorization 1. OK. Tb«r. L «» 
^ message. 

^ »<iVworlc address 21 and 
d„tln.tlo» n.t«orX .ddr~. 22. 8t.p 

! TcolnUlon. net-orx d.Uv r. 

Xt .fp s^se^ontly. proc dur.X 

a.t.9r- 3 to ;o7.0 m FI60RB 3 to proc s. 

control return, to .t.? lo" 
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Bodlf icatlons arm posalbl In the preferr d 
eabodinents without saterially departing f r 0 th 
novel teachings and advantages of this invention. For 

exaople, product 1 vas described as sometiaes 

5 consisting of information as veil as software which 
controls the information. This approach provides th 
greatest flexibility, but it is also possible to 
include the software which controls the information in 
the networked machine at the licensee's site. In this 
10 case, product 1 is split, with part of it on media and 
part on the licensee's machine. By doing this, some 
space Odin be saved on the media containing product 1, 
but the capabilities of t hese produc ts wi ll be limited 
by the standard functions available on these machines. 
15 Also, the presently described embodiment includes 

a product 1 which is at the licensee's site. This 
implie s that product 1 is on som e ph ysical media such 
as diskette, tape, or CO. However, product 1 can be 
electronically delivered over commtinications lines to 
20 the licensee and therefore might exist in the memory 
of the licensee's machine, rather than any physical 
media. In the case of a product such as music, radio 
programs and the like, product 1 may even be broadcast 
to the licensee's site for playback; thus, the product 
25 1 would not even be "resident" in the licensee's 
machine. 

The presently described embodiment allows the 
licensee to access the licensed product concuirrent 
with the sending and receiving of datagram 3. In this 
30 way, the present invention does not inconvenience the 
legitimate licensee; however, for sensitive licensed 
products such as c nfid ntial information, th licens 
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obtaining said facility addr ss that id ntifi s said 
lie nsa fr B said c maunications facility without any 
data being provided by said licensaa. 

51. A sathod for controlling usa of a licans d 
product coaprising tha staps of: 

generating a request datagram including a 
facility address that identifies a licensee in a 
coauBunications facility; 

automatically sending said request datagraa 
from a licensee's site over said coaaunications 
facility to a licensor's site while said licensed 
product is in use; and 

receiving a reply authorizing datagraa at 
said licensee's site and denying the use of said 
product when no reply authorizing datagraa is 
received. 

52. A aethod as in claia 51 wherein: 

said generating step includes the step of 
incorporating a aodel number of said product in said 
datagraa. 

53. A aethod as in claia 51, wherein said 
generating step includes the step of autoaatically 
obtaining said facility address that identifies said 
licensee froa said conaunications facility without any 
data being provided by said licensee. 

54. A aethod as in claia 51, wherein: 

said reply datagraa is one of at least a reply 
auth rization datagraa and a reply denial datagraa; 
and 
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said 8t p of automatically s nding said r qu st 
datagram from a licensea's site includes a step of 
resending said request datagram if neither a reply 
author i ting, datagram nor a reply denial datagram is 
5 received within a predetermined time from sending said 
request datagram from said licensee's site. 

55. X method as in claim 51, vberein said step 
of automatically sending said request datagram from 
said licensee's site includes the step of sending a 

10 request datagram at regular time intervals. 

5 6 . - A -rigfehod as In claim 51, wherein: 

said generating step includes ~the ~step of 
providing a datagram identification code within said 
datagram; and 

15 : ^said-reply-receiv-ing-step-re-jects said reply 

authorizing datagram if the datagram identification 
-code-included-in-saiTi-rep ly auth orirzing-datagram does 
not match the datagram identification code included in 
said request datagram. 

20 57. A method as in claim 51, %^erein: 

said generating step includes the step of 
incorporating in said datagram data indicative of the 
number of processes currently using said product at 
said licensee's site. 

25 58. A method as in claim 51, further comprising 

the steps of: 

receiving a reply denial datagram; and 
displaying, at a licens 's sit , a reason f r 
denial wh n said r ply d nial datagram is r c iv d. 
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check aonitor 2 can prmv nt access t ths product 1 
until an author! tati n reply datagram 3 is r celv d. 

Further, aonitor 2 could be realized as an 
integral part of product I. Monitor 2 could als be 
5 inpleaented as: 1) a- separate process vhich is the 
parent process of product 1 (Such a parent proc ss 
would have the authority to cancel the use of product 
1); 2) a single systea level task vhich contr Is 
license checking of all products at the licens 's 

10 site; and 3) custom logic in a digital integrated 
circuit (the present invention could be implement d 
as hardware instead of software) . 

Also, though the above embodiment has been 
described as being implemented on-a coaputer^ystem 

15 network where operator messages are provided on a CRT 
monitor or the like, the invention may be practiced 
on other hardware platforms by incorporating 
appropriate changes known- to those-of-ordinary- skill 
in the art. For exanple, in an alternative "hardware 

20 embodiment s~uch~as~a music or video "playback devic , 
monitor 2 is invoked by the licensee's action of 
pushing the "play" or similar button, and in a 
broadcast music application or similar systea, th 
monitor may b^ invoked simply by turning th« devic 

25 on. The processing of monitor 2 is as described in 
the presently described embodiment. However, wh n a 
denial message is received or generated, monitor 2 
must be able to switch "play" to "off". 

The presently described embodiment is design d 

30 to be used in conjunction with a connectionless UDP 
(User Datagram Protocol) in the TCP/IP protocol suit 
as an underlying pr tocol. Howev r, the pr s nt 
invention could also be r alls d using a slow r. 
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conn ctionl pr toe 1 .u* , 
v«i.ty of conn.etion protoc 1. ( • 9-. 

protocol. (FTP) . • dltt.r.nt 

5 fro. TCP/IP could b. -^^J' ^ .^^l^ion, 

data,r»« 3 could b. ^^^^ ,p,ei£i«d by 

co»unlc.tion. protocol. ,„tem.tion.l 
CCITT (Consultativo com. ^^^^ tolephon 

„ Telephony and ''l^^'^^';,,^"^,^ ,,^.s.e. 21, «• 
„u»ber. could serv. a ^,3, comunicati n. 

comunlcation. protocols tor 

.uch a.-c.llular tsl.phon. can »l so ^ 

th« datagraa 3. - .7, .uch sodlficatlons ar 

irtTonrs-d" in^_t-i^-- 
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IfflAT Tff flAHffP X8» 

1. A method for nonitorlng th« umm of a 
licensed product, comprising the steps of: 

generating, at regular time intervals, 
5 datagrams including an address in a communications 
facility, said facility address identifying a 
licensee; 

automatically sending said datagrams from 
at least one licensee's site over said facility to a 
10 licensor's site while said licensed product is in use; 

receiving said datagrams at said licensor's 

site; ^ ^ 

storing an indication of receipt of each f 

said datagrams; and 

counting said datagrams from each licens e 
as an indication of the use by the licensee of said 
licensed product. 



20 



25 



2. A method as in claim 1 further wherein: 
said generating step includes the step of 

incorporating a model number of said product in said 

datagrams; and- 

said counting step includes the step of 
separately counting datagrams for each product mod 1 
number for each licensee. 

3. A method as in claim I, wherein said 
generating step includes the step of automatically 
obtaining said facility address that identifies said 
licensee from said facility without any data being 
provid d by said lie nsee. 



wo 93/01550 



PCT/US92/05387 



10 



20 



25 



30 



- 28 - 



4. A nethod for controlling \xse of a licensed 
product comprising the steps of: 

generating a request datagram including an 
address in a communications facility, said facility 
address identifying a licensee; 

automatically sending said request datagram 
from at least one licensee's site over said facility 
to a licensor's site while said licensed product is in 
use; 

receiving said request datagram at said 

licensor's site; 

^comparing— said— received- request^datagraiiL 



with rules and license data at said licensor's site to 
determine if use of said licensed product is 

15 authorized; 

sending-a-reply-authorizing_datag ram to sa id 

licensee's site if use of said licensed product is 

approved; and 

receiving said reply authorizing datagram at 
said licensee's site and denying the use of said 
product when no reply authorizing datagram is 
received. 

5. A method as in claim 4, wherein: 

said generating step includes the step of 
incorporating a model number of said product in said 
datagram; 

said comparing step includes the step of 
comparing said rules and license data for a particular 

model niimber; and 

said s nding step includes the step f 
transmitting said reply datagram for ach product 
mod 1 number. 
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6. A Bothod as in clain 4, wherain said 
generating step includes the step of autonatioally 
obtaining said facility address that identifies said 
licensee fron said facility without any data being 

5 provided by said licensee. 

7. A nethod as in clain 4 further comprising 
the step of sending a reply denial datagram if use of 
said licensed product is not approved as detemined in 
said comparing step, said step of automatically 

10 sending said request datagram from a licensee's site 
including the step of resending said request datagram 
if neither a reply authorizing datagram nor a reply 
denial dat^ggam is rec eived fr om sa id licen8or^?__.8ite 
within a predetermined time from sending said request 

15~^datagram from said licensee's site. 

8. A method as in claim 4, wherein said step of 
automatically sending said request datagram from said 
licensee's site includes the step of sending a request 
datagram at regular time intervals. 

20 9. A method as in. claim 4, wherein: 

said generating step includes the step of 
providing a datagram identification code within said 
datagram; 

said reply datagram sending step includes 
25 the step of inserting the same datagram identification 
code in said reply datagram; and 

said r ply r ceiving st p r j cts said reply 
authorizing datagram if th datagram identification 
code includ d in said reply authorizing datagram does 
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not match the datagram identification code included in 
said request datagram. 

10. A method as in claim 4, wherein: 

said comparing step includes the step of 
5 comparing said facility address that identifies said 
licensee with a list of valid licensee addresses to 
determine if said facility address is a valid address; 
and 

said reply authorizing datagram is not sent 
10 if said facility address that identifies said licensee 
is not valid. 

11. A method as in claim 10 further comprising 
the step of sending IT reply denial-datagram-if-said- 
facility address that identifies said licensee is not 

15 valid. 

12. A method as in claim 4, wherein: 

said comparing step includes the step of 
comparing a license expiration date with a date at 
which said datagram is received; and 

said reply authorizing datagram is not sent 
if the license expiration date is later than the date 
at which said datagram is received. 

13. A method as in claim 12, further comprising 
the step of sending a reply denial datagram if the 

25 license expiration date is later than the date at 
which said datagram is received. 

14. Am thod as in claim 4, wher in: 
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said comparing at p includ s th step f 

ch eking curr ntness of paym nta from said lie ns«; 
and 

said reply authorizing datagram is not sent 
5 if payment is overdue. 

15. A method as in claim 14, further comprising 
the step of sending a reply denial datagram if payment 
is overdue. 

16. A method as in claim 4, wherein: 

10 said generating step includes the step of 

incorporating in said datagram data indicative of th 
number of processes currently using said product at 
said licensee's site; 

said comparing step includes the step of 

15 comparing the number of processes using said product 
at the licensee's site to an authorized number; and 

said reply authorizing datagram is not sent 
if said number of processes using said product exceeds 
said authorized number. 

20 17. A method as in claim 16, further comprising 

the step of sending a reply denial datagram if said 
number of processes using said product exceeds said 
authorized number. 

18. A method as in claim 4, wherein said sending 
25 step includes the steps of sending said reply 
authorizing' datagram when use of said product is 
approved and sending a reply denial datagram when us 
f said product is n t approved, said r c iving st p 
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d nylng use of eaid product when said r ply d nial 
datagram is receiv d. 

19. A method as in claim 18, wherein said 
receiving~and dinying-st^ denies use of-said product 
vhen neither a reply authorizing datagram nor a reply 
denial datagram is received within a predetermined 
time after said request datagram is sent. 

20. A method as in claim 18, further comprising 
the step of indicating, at a licensee's site, a reas n 
for denial when said reply denial datagram is 
received^ _ _ ^ 

21. A method as in claim 4, wherein: 
said licensed product comprises an executable 

portion and a data porti on; and 

said method further comprises- a step f 
controlling use of said data portion with said 
executable portion. 

22. A method as in claim 4 further comprising a 
step of' allowing use of said licensed product bef or 

20 a reply datagram is received. 

23. A system for controlling licensed product 
comprising; 

a communications facility to which at least 
one licensee having a license for operating a licens d 
25 product from the licensor is connected; 

monitoring means, connected to said facility 
at a sit of each said licens e, for generating a 
r qu St datagram including an addr ss of said licens 
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on said facility and transaitting said request 
datagram over said facility t a sit f said 
licensor, and for receiving and processing a reply 
datagraa; and 

5 controlling aeans, connected to said 

facility at said licensor's site, for receiving said 
request datagram, comparing said request datagram with 
rules and license data to determine if use of said 
licensed product is authorized and sending a reply 
10 authorizing datagram to said licensee's site if use of 
said product is approved; and 

said monitoring means including means fcr 
denying use of said licensed product when no reply 
authorizing datagram is received. " 

—1-5 24. ^A-system as in claim 23, wherein: 

said monitoring means sends requ st 
datagi-ams at reguiat time intervals during use of said 

licensed product; and 

said controlling means fiirther compris s 
20 means for counting said request datagrams received at 
said controlling means and means for computing an 
amount to be billed to said licensee in response to 
said counting. 

25. A system as in claim 23 wherein: 
25 said monitoring means incorporates a model 

number for said product in said request datagram; and 
said controlling means comprises means f r 
counting datagrams for each product model number f r 
each licensee, in order to compute an amount to be 
30 billed t ach licens . 



PCrAJS92/05387 

WO 93/01550 

- 34 - 



26. A syste. a. in claim 23, vh rein said 
monitoring »ean. automatioally obtain, said facility 
address o£ said licensee fro. said facility without 
any input from said licensee. 

5 27. A system as in claim 23, wherein: 

said controlling means sends a reply denial 
datagram to said licensee's site if use of said 
product is not approved; and 

said monitoring means resends said request 
10 datagram if no reply authorising datagram and no reply 
denial datagram is received within a predetermined 
= .period of time after said requesting datagram is sent. 

28. A system as in claim 23, wherein said 
monitoring means transmits request -datagrams at 

-15.^predeterained_time intervals. 

29. A system as in claim 23, wherein: 

said monitoring means incorporates a unique 
identification code in said request datagram; 

said controlling means incorporates the sam 
20 request datagram identification code in said reply 

authorizing datagram; and 

said monitoring means rejects any reply 
authorizing datagram which does not include the sam 
identification code as included in said request 
25 datagraa. 

JO. A 8y.t«n a> in cl.l» M. wherein ..W 
controUln, ..an. conpar.. .aid facility 
.aid lie n.e. with a li.t f valid lie n.e faeility 
addr . and do . n t 9" rat . t ply authorUin, 
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datagram if aald facility address of said licens is 
not valid. . 

31. A systaa as in claia 30, wherein said 
controlling Bean« "ends a reply denial datagram wh n 
said facility address is not valid. 

32. A system as in claim 23, wherein said 
controlling means compares an expiration date of a 
license of said product with a date at which said 
request datagram is received by said controlling 
means, and does not generate a reply authorizing 
datagram, thus denying use of said product, if th 

Ti^nse^ ej^ration dat^I^ eaSTier "tJ&an thcrxlate at 
which said request datagram is received. 

33. A system as in claim 32, wherein said 
controlling means sehds "a reply denia^inaatagraalf th 
licen se expiration date is earlier than the date at 
which said request datagram is received. 

34. A system as in claim 23, wherein said 
controlling means generates a reply authorizing 
datagram, thus denying use of said product, if a 
payment for the use of said product is overdue. 

35. A system as in claim 34 ^ wherein said 
controlling means sends a reply denial datagram if 
payment for the use of said product is overdue. 

36. A system as in claim 23, wherein: 

said monit ring m ans includ s in said 
request datagram data indicative f the number of 



wo 93/01550 



PCrAJS92/05387 

36 - 



10 



15 



20 



25 



proc SB at a liens s's sit , currently using said 

product; and 

said controlling means does not generate a 

reply authoriring datagram, thus denying a use of said 
product, if »ore than a predetermined number of 
processes using said product are running at the 
licensee** site. 

37. A system as in claim 36, wherein said 
controlling means sends a reply denial datagram if 
more than said predetermined number of processes using 
said product are running at the licensee's site. 

38. — ^A— system as in claim 23, wherein said 

controlling means sends a reply denial datagram if use 
of sald~product is not approved.- - 

39. \ sy«tem""as itTcl^m TBT wherein said 
monitoring means denies use of said licensed product 
when no reply authorizing datagram and no reply denial 
datagram is received within a predetermined time from 
the sending of said request datagram. 

40. A system as in claim 38, further comprising 
Beans for indicating, at a licensee's site, a reas n 
for denial when said reply denial datagram is 
received. 

41. A system as in claim 23, wherein: 

said licensed product comprises an executabl 
portion and a data portion; and 
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said tyst«a furth r conprls s aeans f r 
controlling us of said data portion with said 
•xecutabl« portion* 

42 r A systM as in claia 41, vhar^in said data 
5 portion controlling wans is disposed within said 
•xscutabl* portion. 

43. A systea as in claia 41, wherein said data 
portion controlling aeans comprises a first partial 
controlling means disposed within said executabl 

10 portion and a second partial controlling means 
- disposed within said monitoring means. 

44. A system as in claim 23, wherein said 
monitoring means includes means for permitting use of 
said licensed product before a reply datagram is 

15 received. 



45. A system for monitoring product comprising: 
a communications facility to which at least 
one licensee having a license for operating a licensed 
product from a licensor is connected; 
20 monitoring means, connected to said facility 

at a site of each said licensee, for generating 
datagrams including an address of said licensee n 
said facility and transmitting said datagrams at 
periodic intervals over said facility to a site f 
25 said licensor; and 

control means, connected to said facility at 
said licensor's site, for receiving said requ st 
datagrams, st ring an indication f receipt of ach f 
said datagrams and counting said datagram from ach 
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lie ns as an indication of th us by tha lie nse 
of said licensed product. 

46. A system as in claim 45, wherein said 
monitoring means automatically obtains said facility 

5 address of said licensee from said facility without 
any input from said licensee. 

47. A system as in claim 45, wherein: 

said monitoring means incorporates a product 
model number in said request datagrams; and 
10 said controlling means separately counts 

request datagrams for each product model _nuiia>er for 
each licensee. 

48. A method for monitoring the use of a 
licensed product comprising-the -steps_j>f 

15 generating, at regular time intervals, 

da tagrams i ncluding an address in a communications 

facility, said facility address identifying a 

licensee; and 

automatically sending said datagrams from at 
20 least one licensee's site over said communications 
facility to a licensor's site while said licensed 
product is in use. 

49. A method as in claim 48 further wherein: 
said generating step includes the step of 

25 incorporating a model number of said product in said 
datagrams. 

50. A m thod as in claim 48, wher in said 
g n rating step includ s th st p of automatically 
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btainin? said facility addross that id ntifi a said 
licensaa fr ■ said connunications facility without any 
data b«ing providad by said licensae. 

51. A aethod for controlling usa of a licans d 
product conpr icing the steps of: 

generating a request datagraa including a 
facility address that identifies a licensee in a 
connunications facility; 

autonatically sending said request datagran 
froB a licensee's site over said coinnunications 
facility to a licensor's site while said licens d 
product is in use; and 

receiving a reply authorizing datagran at 
said licensee's site and denying the use of said 
product when no reply authorizing datagran is 
received. 

52. A aethod as in clain 51 wherein: 

said generating step includes the step of 
incorporating a nodel nunber of said product in said 
datagran. 

53. A nethod as in clain 51, wherein said 
generating step includes the step of autonatically 
obtaining said facility address that identifies said 
licensee fron said connunications facility without any 
data being provided by said licensee. 

54. A nethod as in clain 51, wherein: 

said reply datagran is one of at least a reply 
authorizati n datagran and a reply denial datagran; 
and 
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said step f autonatlcally s ndlng said r qu st 
datagram fro« a licensee's site includes a step of 
resending said request datagram if neither a reply 
-authoriring datagram nor a reply denial datagram is 
5 received within a predetermined time from sending said 
request datagram from said licensee's site. 

55. A method as in claim 51, wherein said st p 
' of automatically sending said request datagram from 

said licensee's site includes the step of sending a 
10 request datagram at regular tine intervals. 

56. A method as in claim 51, wherein: 
said^generating step"includes"the step f 

providing a datagra m identi fication code within said 

datagram; and 

said reply receiving step rejects said reply 
authorizing datagram if the datagram identif icati n 

code includea-iiTsa^ldrreyly-authori^ing-datagram do s 

not match the datagram identification code included in 
said request datagram. 



57. A method as in claim 51, wherein: 

said generating step includes the step of 
incorporating in said datagram data indicative of th 
number of processes currently using said product at 
said licensee's site. 

58. A method as in claim 51, further comprising 

the steps of: 

receiving a reply denial datagram; and 
displaying, at a license 's site, a r ason for 

d nial wh n said r ply d nial datagram is r ceiv d. 
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59. A nethod as in clain 51, wherein: 

said licensed product conprises an executabl 
portion and a data portion; and 

said Bethod further comprises a step f 
controlling use of said data portion with said 
executable portion. 

60. A Bethod as in clain 51 further comprising 
a step of allowing use of said licensed product before 
a reply datagram is received. 

61. A system for controlling a licensed product 

comprising: 

a communications facility to which at least 
one licensee-is connected; 

monitoring means, connected to said 
communications facility at a site of each said 
licensee, for generating a request datagram including 
an address of said licensee on said communications 
facility and transmitting said request datagram ov r 
said communications facility, and for receiving and 
processing a reply authorizing datagram; and 

Beans for denying use of said product when n 
reply authorizing datagraa is received. 

62. A system as in claim 61, wherein: 

said monitoring means sends request 
datagrams at regular time intervals during use of said 
licensed product. 

63. A system as in claim 61 wh r in: 
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Mid m nitoring « ans incorporat « a aod 1 
number for said product in said request datagraa. 

64. A systea -as in claim 61, wherein said 
Bonitoring .ean. automatically obtains said facility 

5 address of said licensee from said communications 
facility without any input from said licensee. 

65. A system as in claim 61, wherein: 

said monitoring means resends said request 
datagram if no reply authorizing datagram and no reply 
10 denial datagram is received within a predetermined 
-period of-t^ime^after. said requesting datagram is sent. 

66. A system as in claim 61, wherein said 
Bonitoring means transmits request datagrams at 

predetermlned-feime-intervals. 

— ^j- — jpsys tem a s~in-Clttim 6 -wherein; 

said monitoring means incorporates a uniqu 
identification code in said request datagram; and 

said monitoring means rejects any reply 
authorising datagram which does not include the sam 
20 identification code as included in said request 
datagram. 

68. A system as in claim 61, wherein: 

said monitoring means includes in said 
request datagram data indicative of the number of 
25 processes, at a licensee's site, currently using said 
product. 

69. A syst m as in claim 61, wher in: 
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said Bonitorlng means deni a us of said 
lie nsed product wh n no reply authorizing datagraa 
and no reply denial datagram is recsived within a 
predetersined ti»e f roa the sending o£ said request 
5 datagraa. 

70. A system as in claim 61, further comprising 
means for indicating, at a licensee's site, a reason 
for denial when a reply denial datagram is received. 

71. A system as in claim 61, wherein: 

10 said licensed product comprises an executable 

portion and a data portion; and 

said system further comprises means f r 
controlling use of said data portion with said 
executable .port ion . . 

15 72. A system as in claim 71, wherein said data 

portion controlling means is disposed within said 
executable portion. 

73. A system as in claim 71, wherein said data 
portion controlling means comprises a first partial 

20 controlling means disposed within said executable 
portion and a second partial controlling means 
disposed within said monitoring means. 

74. A system as in claim 61, wherein said 
monitoring means includes means for permitting use f 

25 said licensed product before a reply datagram is 
received. 
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75. A systea for aonitoring a lie nsed product 

« 

conprisings 

a coBiBunication* facility to which at leaat 
one liconsaa i« conn«ctad; 
5 Bonitoring means, connected to said 

coamunicationa facility at a site of each said 
licensee, for generating datagraas including an 
address of said licensee on said comnunications 
facility and transmitting said datagrams at periodic 
10 intervals over said communications facility. 

76. A system as in claim 75, wherein said 
monitoring means automatically obtains said 
^^nications facility address of said licensee from 
said communications facility without any input from 

15 said licensee. 

77. A system as in claim 75, wherein: 
-8ai-dTfiOTrf.^oring-means-incorporate8-a product 



model number in said request datagrams. 

78. A method for monitoring the use of a 
20 licensed product comprising the steps of: 

receiving datagrams at a licensor's site on 
a communications facility having at least one 
licensee's site thereon, said datagrams being 
generated at regular time intervals and including a 
25 facility address that identifies a licensee in said 
commvmications facility; 

storing an indication of receipt of each of 

said datagrams; and 

counting s id datagrams as an indication of 

30 th us of said lie nsed product. 
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75. A system for Bonitoring a lie ns d product 
comprising: 

a cofflBXinicatlons facility to which at least 
one licensee is connected; 
5 Bonitoring means, connected to said 

coBBunications facility at a site of each said 
licensee, for generating datagraas including an 
address of said licensee on said coanunications 
facility and transmitting said datagrams at periodic 
10 intervals over said comauni cat ions facility. 

76. A system as in claim 75, wherein said 
monitoring means autonatically obtains said 
coamunications facility address of said licensee from 
said communications facility without any input from 

15 said licensee. 

77. A system as in claim 75, wherein: 

said monitoring Beans incorporates a product 
model number in said request datagrams. 

78. A method for monitoring the use of a 
20 licensed product comprising the steps of: 

receiving datagrams at a licensor's site on 
a communications facility having at least on 
licensee's site thereon, said datagrams being 
generated at regular time intervals and including a 
25 facility address that identifies a licensee in said 
communications facility; 

storing an indication of receipt of each of 

said datagrzuns; and 

counting said datagrams as an indicati n f 

30 th us of said lie nsed product. 
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79. A ■ thod as in claim 78 further vher in: 
•aid datagraas includa a nodal nuaber f 

each product; and 

said counting step includes the step f 
5 separately counting datagrams for each product model 
number for each licensee. 

80. A method for controlling use of a licens d 
product comprising the steps of: 

receiving a request datagram at a licensor's 
10 site on a communications facility having at least on 

licensee's site thereon, said £®quest datagram 

including a facility address identifying a license 
and being automatically sent over said communications 

fadltty~to said licensor's site while said licens d 

15 product is in use; _ 

comparing said received request datagram 

-with rules and license data at said licensor's site t 

determine if use of said licensed product is 
authorized; and 
20 sending a reply authorizing datagram if us 

of said licensed product is approved. 

81. A method as in claim 80 wherein: 

said datagrams include a model number f 
said product; 

25 said comparing step includes the step of 

comparing said rules and license data for a particular 
model number; and 

said sending step includes the step of 
transmitting said r ply datagram f r ach product 

30 mod 1 number. 
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S2. A ■ethod as in claim 80 fxirther comprialng 
thm step of sending a reply denial datagran if use of 
said licensed product is not approved as deterained 
in said coaparing step. 

83. A aethod as in claim 80, wherein: 

said datagrams Include a datagram 
identification code; and 

said reply datagram sending step includes 
the step of inserting the same datagram identification 
code in said reply datagram. 

84. A method as in claim 80, wherein: 

said comparing step includes the step of 
comparing said facility address that identifies said 
licensee with a list of valid licensee addresses to 
determine if said facility address is a valid address; 
and 

said reply authorizing datagram is not sent 
if said facility address that identifies said licensee 
is not valid. 

85. A method as in claim 84 further comprising 
the step of sending a reply denial datagram if said 
facility address that identifies said licensee is not 
valid. 

86. A method as in claim 80, wherein: 

said comparing step Includes the step of 
comparing a license expiration date with a date at 
which said datagram is r ceiv d; and 
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said reply authorizing datagram is not sent 
if the license expiration date is later than the dat 
at which-said- datagram is received. 

87. A method as in claim 86, further comprising 
5 the step of sending a reply denial datagram if th 

license expiration date is later than the date at 
which said datagram is received. 

88. A method as in claim 80, wherein: 

said comparing step includes the step of 
10 " "cfigelciW cufrejvtness of" payments from said_ licens ; 
and 

said reply authorizing datagram is not sent 
if payment is overdue. 

8 9. A method as in claim 88, further compris ing 
15 the step of sending a reply denial datagram if paym nt 

is overdue. 

90. A method as in claim 80, wherein: 

said datagrams include data indicative of 
the number of processes currently using said product 
20 at said licensee's. site; 

said comparing step includes the step of 
comparing a number of processes using said product t 
an authorized number; and 

said reply authorizing datagram is not sent 
25 if said number of processes using said product exce ds 
said author iz d number. 

91. A method as in claim 90, furth r comprising 
th St p of s nding a reply denial datagram if said 
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10 



nuBiber of proc bb m using said product xc ds said 
authorized number. 

92. A method as in claim 80, wherein said 
sending step Includes the steps of sending said reply 
authorizing datagram when use of said product is 
approved and sending a reply denial datagram when use 
of said product is not approved. 

93. A system for controlling a licensed product 
comprising: 

a communications facility to which at least 
one licensee and a licensor are connected at a 
licensee's— site - and - at- a -licensor's site. 



respectively; and 

controlling means, connected to said 

15 communications facility at said licensor's site, for: 
receiving a request datagram, said request datagram 
including— an— address-^f_said_ licensee on said 
communications facility and being transmitted over 
said communications facility to a site of said 

20 licensor; comparing said request datagram with rules 
and license data to determine if use of said licensed 
product is authorized; and sending a reply authorizing 
datagram to said licensee's site if use of said 
product is approved. 

25 94. A system as in claim 93, wherein: 

said request datagrams are sent at regular 
time intervals during use of said licensed product; 
and 

said c ntrolling means c mprls s means for 
30 c unting said r quest datagrams receiv d at said 
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99. A syste. a. in clai- 98, wherein said 
controlling »ean. . nd. a r ply denial datagram when 
said facility address ie not valid. 

100. A syste. as in claU 93, wherein said 
controlling means compares an expiration date of a 
license of said product with a date at which said 
request datagram is received by said controlling 
means, and does not generate a reply -tho'i^J"^ 
datagram, thus denying use of said product, if the 
license expiration date is earlier than the date at 
which said request datagram is received. 

_101. X s yst e m as in claim 100, wherein said 
controlling means sends a reply denial datagram if th 
-license-expiration_,dateLjs earlier than the date at 
which said request datagram is received. 

102. A system as in claim 93, wherein said 
controlling aeans generate a reply authorizing 
datagram, thus denying use of said product, if a 
payment for the use of said product is overdue. 

103. A system as in claim 102, wherein said 
controlling means sends a reply denial datagram if 
payment for the use of said product is overdue. 

104. A system as in claim 93, wherein: 

said datagrams include data indicative f 
the number of processes, at a licensee's sit , 
currently using said product; and 

said c ntrolling m ans d s not g n rate a 
r ply authorizing datagram, thus denying a us of said 
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product, if a r« than a pr d terainad utiabar of 
procass m ualng aald product ar ninning at th 
llcansea*a slta. 

105, A ayataa as in clala 104, wharaln said 
5 controlling «aans sands a reply denial datagram if 

■ore than said predetermined number of processes using 
said product are running at the licensee's site. 

106. A system as in claim 93, wherein said 
controlling means sends a reply denial datagram if us 

10 of said product is not approved. 

-107. A-system-as in claim 93, -wherein: 

said licensed product comprises an executabl 
portion and~a data portion; and 

said system fxirther comprises means for 
15 controlling use of said data portion with said 
executable^>ortion« 

108. A system as in claim 107, wherein said data 
portion controlling means is disposed within said 
executable portion. 

20 109. A system for monitoring a licensed product 

comprising: 

a communications facility to which at least 
one licensee and a licensor are connected at a 
licensee's site and at a licensor's sit , 
25 respectively; and 

control means, connected to said 
communicati ns facility at a licens r'm sit , for: 
r c iving r qu st datagrams, said r qu st datagrams 
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including an address £ said license n said 
c maunicati ns facility and being transmitted at 
periodic intervals over said coamunications facility 
to said licensor's site; storing an indication of 
5 receipt of each of said datagraas; and counting said 
datagrans fro« each licensee as an indication of the 
use by the licensee of said licensed product. 

110. A systea as in claim 110, wherein: 

said request datagrams include a product 

10 model number; and 

said controlling means separately counts 
request datagrams for each product model number for 
each licensee. 
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